FortiWeb - Stack-Based Buffer Overflow vulnerability

2021-11-0200:00:00

FortiGuard Labs

www.fortiguard.com

0.002 Low

EPSS

Percentile

55.8%

JSON

A stack-based buffer overflow [CWE-121] vulnerability in FortiWeb may allow an unauthenticated attacker to overwrite the content of the stack and potentially execute arbitrary code by sending crafted HTTP requests with large request parameter values.

CPENameOperatorVersion
fortiwebeq6.4.0
fortiwebeq6.3.9
fortiwebeq6.3.8
fortiwebeq6.3.7
fortiwebeq6.3.6
fortiwebeq6.3.5
fortiwebeq6.3.4
fortiwebeq6.3.3
fortiwebeq6.3.2
fortiwebeq6.3.15

Name	Operator	Version
fortiweb	eq	6.4.0
fortiweb	eq	6.3.9
fortiweb	eq	6.3.8
fortiweb	eq	6.3.7
fortiweb	eq	6.3.6
fortiweb	eq	6.3.5
fortiweb	eq	6.3.4
fortiweb	eq	6.3.3
fortiweb	eq	6.3.2
fortiweb	eq	6.3.15

Rows per page:

1-10 of 231

0.002 Low

EPSS

Percentile

55.8%

JSON

Related for FG-IR-21-119